Security firm SlowMist has warned about a sophisticated attack vector targeting cryptocurrency deposit addresses on compromised websites. The technique involves substituting the legitimate deposit address with an attacker-controlled one directly in the browser environment. According to SlowMist, users who pasted a deposit address and compared it against the displayed screen would see the same substituted address in both locations, effectively bypassing traditional verification methods that rely on clipboard-to-screen comparison.